Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: Z5+qZ68KSsnrMX1d4raCJAiHR9TumPTxks4uGRDcI04=
Subject key identifier: C3:92:67:48:DF:9E:14:0B:B9:01:4C:EF:1D:67:58:08:9F:FF:C4:2C
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 0197B6A249425D11601B7CA18B1FC5B1FA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:58 +0000
Manifest this update: Sat 28 Jun 2025 13:02:58 +0000
Manifest next update: Sun 29 Jun 2025 13:02:58 +0000
Files and hashes: 1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: 658MLodrIGQFHNOEvn+nM0CB5rUST/QliaO4CHlGSEA=)
2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:49:42:5d:11:60:1b:7c:a1:8b:1f:c5:b1:fa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: Jun 28 13:02:58 2025 GMT
Not After : Jun 29 13:02:58 2025 GMT
Subject: CN=c3926748df9e140bb9014cef1d6758089fffc42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:99:ac:99:2d:f4:3a:a0:57:c3:0b:8f:94:
32:dc:1c:dc:fe:46:60:4f:1e:20:41:5f:44:73:00:
c3:3b:5e:4c:73:cc:e3:36:0e:67:f3:93:d0:75:36:
5e:02:68:d6:ad:23:04:ee:54:1c:bd:90:c3:9d:ca:
93:43:57:e9:d5:1c:29:5f:7b:be:78:2a:cf:26:07:
ef:0a:60:7c:be:9e:73:8e:d1:66:3c:8d:e8:3f:d4:
79:50:df:e1:81:d8:de:3c:50:36:70:cb:8a:1d:db:
e2:46:64:7d:91:df:72:e3:dd:d4:83:d2:74:e4:52:
59:85:72:a6:57:e1:33:4d:ad:fe:2a:ef:99:9f:93:
3f:17:86:4e:66:fe:a0:33:24:7e:27:ba:91:f5:1c:
5d:d8:c6:89:7b:4c:64:d1:57:1b:5c:c4:6a:36:b0:
f4:11:53:ff:f0:ef:c8:04:50:e4:c7:84:cb:e1:d0:
d1:46:a6:36:b3:a9:a1:e0:fb:1b:d9:0b:19:74:78:
e4:76:e6:a7:34:b8:9a:32:84:c9:4d:75:11:17:b2:
67:0f:79:e3:38:33:99:08:c3:69:79:89:62:96:c1:
41:1c:12:7d:36:d0:f4:39:85:1a:09:64:ee:14:95:
10:cc:ac:c0:96:59:0f:15:44:29:9c:ac:4f:ae:39:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:92:67:48:DF:9E:14:0B:B9:01:4C:EF:1D:67:58:08:9F:FF:C4:2C
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e0:4f:7b:7d:9c:28:53:5b:e8:b7:23:52:4a:80:fb:ea:e9:
7a:ad:7c:81:65:cd:3b:31:24:a1:fb:24:9c:21:c3:30:34:34:
52:09:2e:f3:45:16:fb:cb:71:91:d2:30:c7:94:69:a2:94:66:
2b:7c:91:ed:74:e2:77:0c:3f:6e:7b:88:b0:65:39:7a:d6:1f:
1a:20:72:e0:34:15:dc:1a:8d:b2:af:6e:e6:1b:9f:03:94:9b:
6c:ba:09:91:2f:e8:4b:49:10:59:63:9c:5c:c4:e4:58:24:90:
c1:f5:a3:4a:98:47:39:5b:d1:b1:8e:84:4b:34:15:5e:00:44:
b9:79:fe:20:7c:7d:82:fe:37:d1:a6:20:d2:e8:73:28:c6:e9:
1e:b4:fc:fd:f0:a5:0b:11:50:24:fc:b8:3b:2f:a5:36:e5:d1:
8a:e5:f8:ed:fd:91:30:e0:f7:00:3f:9b:5e:f3:2e:97:e0:9f:
d3:ed:b3:ca:bb:2b:7b:ce:b9:1c:9d:0d:4a:bd:9e:5b:00:ac:
ca:f3:52:3d:cc:85:e9:ff:59:db:86:31:9b:4c:64:c4:1f:73:
0c:b1:74:27:63:32:c9:55:db:a8:8c:a9:f7:c9:22:58:d3:47:
97:4a:f5:25:04:28:fb:77:15:1c:76:e4:c2:c7:a8:61:dd:c3:
37:a0:80:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:31 2025 by rpki-client